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DETAILED ACTION 

1 . Claims 1 -1 1 , 1 3-29, 31-47, and 49-57 are pending in the instant Application and 
have been examined. This Office Action is responsive to the telephonic interview 
conducted with the Applicant's representatives on December 12, 2007. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Anthony Jones on December 12, 2007. 
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IN THE SPECIFICATION 

On page 7, lines 23-26 are amended as follows: 

digital video discs^ [[,]] and computor instruction signalo o mbod i od in a transm i oo i on 
m e dium (with or w i thout a carr ie r wavo upon which tho signals aro modu l ated). 
For e xamp l e, tho transmiss i on med i um may includo a commun i cations network, 
such as the Int o mot. 



Application/Control Number: 09/691,278 
Art Unit: 2137 



IN THE CLAIMS 



Claims 55, 56, and 57 are cancelled. 



Claim 1 is replaced with the following 



version: 



1- A method for operating a key distribution center (KDC) tha, provides Keys to 
factate secure communications between c lfen ,s and severs across a computer 

comprise receiving a communication from a sen,er , ha , is authenticated a, the KDC 
wherein the communication includes a temporary secret Key to be used in 

secret key is shared between the server and the KDr 

kev in a Hat h ,0rm9 *• ,empora, y s< *ret 

Key in a database at the KDr . 

the KDC. so that the temporaiy secret key can be subsequent* 

in response to a request from the KDr f« 

invalid ten™ ^ ^ 3 " 6W tem ^ -ret key to repiac, the 

invalid temporary secret key. 
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Claim 19 is replaced with the following version: 

1 9. A computer-readable storage medium storing instructions that when executed by 
a computer cause the computer to perform a method for operating a key distribution 
center (KDC) that provides keys to facilitate secure communications between clients 
and servers across a computer network, wherein the KDC operates without having to 
store long-term server secrets, the method comprising: receiving a communication from 
a server that is authenticated at the KDC; wherein the communication includes a 
temporary secret key to be used in communications with the server for a limited time 
period, and wherein the temporary secret key is shared between the server and the 
KDC; and storing the temporary secret key in a database at the KDC, so that the 
temporary secret key can be subsequently used to facilitate one or more 
communications between a client and the server, wherein the temporary secret key is 
encrypted with a public key belonging to the KDC so that the temporary secret key can 
only be decrypted using a private key belonging to the KDC; wherein the temporary 
secret key is a short-term secret which becomes invalid after a short time period; and 
wherein the server generates a new temporary secret key in response to a request from 
the KDC for a new temporary secret key to replace the invalid temporary secret key. 
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Claim 37 is replaced with the following version: 
37. An apparatus that provides keys to facilitate secure communications between 
clients and servers across a computer network, wherein the apparatus operates without 
having to store long-term server secrets, comprising: a key distribution center (KDC); 

a receiving mechanism within the KDC that is configured to receive a communication 
from a server; wherein the communication includes a temporary secret key to be used 
in communications with the server for a limited time period, and wherein the temporary 
secret key is shared between the server and the KDC; and a storage mechanism within 
the KDC that is configured to store the temporary secret key in a database at the KDC, 
so that the temporary secret key can be subsequently used to facilitate one or more 
communications between a client and the server, wherein the temporary secret key 
encrypted with a public key belonging to the KDC, so that the temporary secret key 
only be decrypted using a private key belonging to the KDC; wherein the temporary 
secret key is a short-term secret which becomes invalid after a short time period; and 
wherein the server generates a new temporary secret key in response to a request from 
the KDC for a new temporary secret key to replace the invalid temporary secret key. 



is 

can 
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Allowable Subject Matter 

3. Claims 1-11, 13-29, 31-47, and 49-54 are allowed. 

4. The following is an examiner's statement of reasons for allowance: 

The closest prior art in the field does not teach the features of the claimed invention of: 
a server initiating an authentication message exchange with a Key Distribution Center 
(KDC) where the authentication message contains a temporary secret key to be used in 
subsequent communications between the server and the KDC, where the temporary 
secret key is stored in the KDC so as to be used to facilitate communications between a 
client and the server, where the temporary secret key is stored at the KDC encrypted 
with a public key of the KDC, where the temporary secret key becomes invalid after a 
short time period and a new replacement secret key is generated by the server upon 
request by the KDC. All in the manner of the applicant as found in the independent 
claims and disclosed in the Applicant's specification. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 



5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paul E. Callahan whose telephone number is (571) 272- 
3869. The examiner can normally be reached on M-F from 9 to 5. 

If attempts to reach the examiner by telephone are unsuccessful, the Examiner's 
supervisor, Emmanuel Moise, can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is: (571) 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




/Paul Callahan/ 



January 2, 2008 




